CVE-2018-0161VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2018-0161: Cisco IOS Software Resource Management Errors Vulnerability

Affects Cisco IOS SoftwareSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/17/2022
EPSS: 4.1% chance of exploitation in 30 days – higher than 90% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2018-0161 (opens in a new tab)

Description

CVE-2018-0161 is a vulnerability in the SNMP subsystem of Cisco IOS Software on certain Cisco Catalyst Switch models. It allows an authenticated remote attacker to cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

This vulnerability affects the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain Cisco Catalyst Switch models. An authenticated remote attacker could exploit this flaw to cause a denial-of-service condition, disrupting network operations. The vulnerability is tracked as CVE-2018-0161 and is associated with resource management errors (CWE-399). Exploits have been observed in the wild, indicating active use by attackers. However, no explicit patch or remediation details are provided in the input data.

Impact

Successful exploitation results in a denial-of-service condition on affected Cisco Catalyst Switches running vulnerable IOS Software, potentially disrupting network availability. The vulnerability requires authentication, limiting exploitation to actors with valid credentials. Known exploitation in the wild confirms active threat.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, administrators should consult Cisco's official advisories for updates. Until a fix is applied, restrict SNMP access to trusted users and networks to reduce risk.

Weaknesses

CWE-399Unclassified weakness (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:40:50 UTC

Weaknesses

References

Related threats